Intel 9515 Saw User Manual


 
DMZ Firewall Solution for the Express Router
07-12-99 Version 1.0 8
Filters are defined as follows:
Filter Function Settings
Prohibit users on the secure network
access to the Internet
Default Action: Discard
1 Allows access to the HTTP /FTP
proxy server on the DMZ.
Action: Pass
Protocol: All
Dest. address type: Host
Dest. address: 10.2.0.2
Src. address type: All
2 Allows access to the SMTP server on
the DMZ.
Action: Pass
Protocol: All
Dest. address type: Host
Dest. address: 10.2.0.3
Src. address type: All
3 Allows access to News (proxy) server
on the DMZ.
Action: Pass
Protocol: All
Dest. address type: Host
Dest. address: 10.2.0.4
Src. address type: All
4 Allows access to the router from the
private LAN.
Action: Pass
Protocol: All
Dest. port address: Host
Dest. address: <LAN1 IP address>
Scr. address type: All
3.3.1.2 Transmit (Tx) Filters on LAN1
Configure these transmit filters for the LAN1 port, shown as they appear in Advanced Setup.
Filters are defined as follows:
Filter Function Settings
Prohibit users on the secure network
access to the Internet
Default Action: Discard
1 Allows HTTP and FTP (read only using
HTTP) from secure LAN to HTTP/FTP
proxy server on the DMZ.
Action: Pass
Protocol: TCP
TCP flags: ACK
Dest. address type: All
Dest. port: >1023
Src. address type: Host